CVE-2026-98291
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit btintel_pcie_submit_rx() used frbd_index > rxq->count to guard the FRBD array access, allowing frbd_index == rxq->count to pass through and index one element past the end of the array. Change the check to >= rxq->count so every out-of-range index is rejected. This issue was reported by Claude Mythos.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 6, 2026
First seenOct 6, 2026
How to fix
Update
- Linux Linuxb5214d72bfdf8ef7744d0c8147e6ebb09b36b259, 18464860ce27af0dccd2fc72830610b85b518cff, de4c3c72bcc6e8474f70c22427f94ca44bccd890, 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c2b636b3f788d10486a6691ad6dd3ec4c93bd78e ≤ v < b5214d72bfdf8ef7744d0c8147e6ebb09b36b259, c2b636b3f788d10486a6691ad6dd3ec4c93bd78e ≤ v < 18464860ce27af0dccd2fc72830610b85b518cff, c2b636b3f788d10486a6691ad6dd3ec4c93bd78e ≤ v < de4c3c72bcc6e8474f70c22427f94ca44bccd890, c2b636b3f788d10486a6691ad6dd3ec4c93bd78e ≤ v < 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765, 6.10 | b5214d72bfdf8ef7744d0c8147e6ebb09b36b259, 18464860ce27af0dccd2fc72830610b85b518cff, de4c3c72bcc6e8474f70c22427f94ca44bccd890, 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.